I'm a software engineer with an MSc in Computer Science and 25+ years in the industry. Here's why Coinkite's Coldcard bug isn't an oopsy, it's disqualifying.

Coldcard's seed generation silently fell back to a non-cryptographic "random" number generator for…

Suggesting any Coldcard setup is secure right now is indefensible. There’s a space right now doing that.

The only sensible mitigation is to stop trusting this vendor.

@w_s_bitcoin @ProofOfMoney

Can someone please make this and sell me one?

Regarding dice rolls on hardware wallets and on @FoundationHQ Passport devices – I highly recommend instead generating the first 11 seed words offline and then importing them into your device. Passport will autocomplete the final word of your seed.

Reminder: A properly generated 12-word BIP39 seed contains 128 bits of entropy, which is sufficient to protect Bitcoin funds.

secp256k1 uses 256-bit private keys but provides approximately 128 bits of classical security, because the best-known generic discrete…

In their own words: "The bulk of randomness on the COLDCARD was coming from a PRNG that I didn’t know was actually in the source code base (it is from a submodule, Micropython)." - Peter Gray (@DocHex) https://blog.coinkite.com/entropy-technical-backgrounder/

Podcasters who read coldcard ads for years now framing their disclosure efforts as some kind of public service — I swear, you couldn’t even make this stuff up.

We have no idea of the scale of losses when the dust settles, but I fear it will be devastating.

Very likely, a large percentage of people having their cold storage stack secured by a Coldcard wallet haven’t even heard of this yet.

It’s called cold storage…

NVK, Adam Back, Samson Mow, Michael Saylor

After an attack like we are seeing, where the blame is obviously and firmly on one company, I think anyone would wish and expect immediate and continuous full transparency, humility and focus on nothing else than mitigating damage and helping customers. This…

"Ten31 (...) proud investors in Coinkite. The only external investor in Coinkite. ColdCard has a dice roll feature. When you create a new seed, you can choose (...). If you choose the dice roll feature, that's like for advanced users only, don't (...) just…

I believe it's extremely important to stress that even users who IMPORTED or generated a seed with DICE are vulnerable, if they use the following features:

If your favorite Bitcoin influencer was still shilling Coldcard products as late as last week, and they're also not rabidly in favor of BIP-110, it might finally be time to realize that they might not know what they're talking about

Per the advice below, we have disabled RBF on our node to ensure that we do not assist thieves leveraging RBF to steal from people trying to rescue funds from multisig addresses generated by coldcards.

We call on @foundryservices @antpoolofficial, @f2pool…

Regarding dice rolls on hardware wallets and on @FoundationHQ Passport devices – I highly recommend instead generating the first 11 seed words offline and then importing them into your device. Passport will autocomplete the final word of your seed.

Christmas Eve 2023.

"Ppl love to create confusion"

I was swarmed by the coldcard mafia for days after asking a bitcoin company not to lie and obfuscate what open source means. To this day I think there are many in the space who don't understand the difference between open…

One of the highest leverage ways to increase Bitcoin security is to fund this man @BTCconsortium @OpenSats

Honestly, Seedsigner is an incredible signing device, by far and away the best in my opinion 👏 👌

Here is our blog post.
- Section 1 is for Liana users, and anyone interested in "game theory" of descriptors and Miniscript/Taproot/Segwit.
- From section 2 its our Post-Mortem of Coldcard.

TLDR: It's worse than you think. Even users who have a safe mnemonic…

Sorry, but you don't get to bitch against reality because it's not as easy as you want.

The only "real solution" is to use real entropy for your keys. Literally. Full stop. No way around it.

Reality literally gives you a very few options to implement this…